Behavioral task
behavioral1
Sample
15d9b48578798075c998d8feff2720cf8f1728ea221da585808a730f0faf5a9f_NeikiAnalytics.exe
Resource
win7-20240508-en
General
-
Target
15d9b48578798075c998d8feff2720cf8f1728ea221da585808a730f0faf5a9f_NeikiAnalytics.exe
-
Size
1.9MB
-
MD5
670b4dcbaff98d13f29e7c621a6b00f0
-
SHA1
ef3e3d32afd14606b7d7d240274d19dbd39d5807
-
SHA256
15d9b48578798075c998d8feff2720cf8f1728ea221da585808a730f0faf5a9f
-
SHA512
c04a98978580212f5fdcf2a937d44467ddd2c0c70ad829652a6d5f5ed425e361999e7b04cac76bce3df34499ef9ad1804f7ea6f3aaa319c0144747b2de6c62e1
-
SSDEEP
49152:BezaTF8FcNkNdfE0pZ9ozt4wISK9NcHFqxF:BemTLkNdfE0pZr5
Malware Config
Signatures
-
XMRig Miner payload 1 IoCs
resource yara_rule sample xmrig -
Xmrig family
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 15d9b48578798075c998d8feff2720cf8f1728ea221da585808a730f0faf5a9f_NeikiAnalytics.exe
Files
-
15d9b48578798075c998d8feff2720cf8f1728ea221da585808a730f0faf5a9f_NeikiAnalytics.exe.exe windows:6 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 724KB - Virtual size: 3.0MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 272KB - Virtual size: 272KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE